Associate a MACsec CKN/CAK with a LAG - AWS Direct Connect

Associate a MACsec CKN/CAK with a LAG

After you create the LAG that supports MACsec, you can associate a CKN/CAK with the connection.

Note

You cannot modify a MACsec secret key after you associate it with a LAG. If you need to modify the key, disassociate the key from the connection, and then associate a new key with the connection. For information about removing an association, see Remove the association between a MACsec secret key and a LAG.

Console

To associate a MACsec key with a LAG

  1. Open the AWS Direct Connect console at https://console.aws.amazon.com/directconnect/v2/home.

  2. In the navigation pane, choose LAGs.

  3. Select the LAG and choose View details.

  4. Choose Associate key.

  5. Enter the MACsec key.

    [Use the CAK/CKN pair] Choose Key Pair, and then do the following:

    • For Connectivity Association Key (CAK), enter the CAK.

    • For Connectivity Association Key Name (CKN), enter the CKN.

    [Use the secret] Choose Existing Secret Manager secret, and then for Secret, select the MACsec secret key.

  6. Choose Associate key.

Command line

To associate a MACsec key with a LAG